CVE

Id
16680  
CVE No.
CVE-2006-0576  
Status
Candidate  
Description
Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH that references malicious (1) which or (2) dirname programs. NOTE: while opcontrol normally is not run setuid, a common configuration suggests accessing opcontrol using sudo. In such a context, this is a vulnerability.  
Phase
Assigned (20060207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
134865 16680 CVE-2006-0576 BUGTRAQ:20060207 Arbitrary code execution via OProfile  View
134866 16680 CVE-2006-0576 URL:http://www.securityfocus.com/archive/1/archive/1/424325/100/0/threaded  View
134867 16680 CVE-2006-0576 MISC:http://www.redhat.com/magazine/012oct05/features/oprofile/  View
134868 16680 CVE-2006-0576 BID:16536  View
134869 16680 CVE-2006-0576 URL:http://www.securityfocus.com/bid/16536  View
134870 16680 CVE-2006-0576 OVAL:oval:org.mitre.oval:def:10890  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61461 JVNDB-2006-003727 Blue Coat Proxy Security Gateway OS における接続フィルタを回避される脆弱性 Blue Coat Proxy Security Gateway OS (SGOS) には、接続フィルタを回避される脆弱性が存在します。 CVE-2006-0578 16680 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003727.html  View